\n Posted on: April 20, 2026, 05:49h.\u00a0\n <\/p>\n
\n Last updated on: April 20, 2026, 05:49h.\n <\/p>\n
![\"Avatar](\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2023\/03\/cropped-5-1-50x50.png\")
<\/div>\n<\/p><\/div>\n<\/p><\/div>\n- \n
- Hackers accessed DraftKings accounts using stolen login credentials
<\/strong><\/li>\n- Fraudsters added payment options and used small deposits to verify access
<\/strong><\/li>\n- Incident highlights rising risks in online betting account security<\/strong><\/li>\n<\/ul>\n
A Memphis, Tenn. man has been sentenced to 30 months in federal prison for his role in the November 2022 DraftKings hack<\/a> that saw more than 60K accounts compromised and more than $600K stolen.<\/p>\n
![\"DraftKings](\"https:\/\/www.casino.org\/news\/wp-content\/uploads\/2026\/04\/draftKings-858x571.jpg\")
The November 2022 DraftKings hack caused the company\u2019s shares to dip 5% after investors feared a drop in consumer confidence in its recently launched mobile app. (Image: DraftKings\/Shutterstock)<\/figcaption><\/figure>\n Kamerin Stokes, 23, aka \u201cTheMFNPlug,\u201d pleaded guilty almost two years ago to one count of conspiring to commit computer intrusion, according to the US Attorney\u2019s Office for the Southern District of New York.<\/p>\n
Along with his prison term, Stokes also faces three years of supervised release and has been ordered to pay $125,965.53 in forfeiture and $1,327,061 in restitution for his role in a credential-stuffing attack that caused DraftKings\u2019 shares to fall 5% on the Nasdaq.<\/p>\n
What is Credential Stuffing?<\/strong><\/h2>\n
Credential stuffing is a type of cyberattack in which criminals use usernames and passwords stolen in unrelated data breaches and test them, often automatically at scale, against other websites. When users have reused the same credentials, attackers can gain access to their accounts without breaching the target company\u2019s systems.<\/p>\n
The hack caused a stock plunge because DraftKings had only recently launched its mobile sportsbook in many US markets and investors feared a drop-off in consumer confidence.<\/p>\n
In this case, Stokes used automated tools to identify valid logins to betting accounts, which were then sold to others on the dark web who exploited them to withdraw funds.<\/p>\n
\nAmong them was a Madison, Wis. teenager named Jospeh Garrison<\/a>, who once bragged to a coconspirator that \u201cfraud is fun.\u201d<\/p>\n<\/div>\n
Once Garrison and his accomplices accessed the DraftKings accounts, they were able to add new payment methods and then deposit $5 to verify them. This enabled them to withdraw all of the funds from the account.<\/p>\n
\u2018Obsessed With Fraud\u2019<\/strong><\/h2>\n
Garrison, who claimed to be \u201caddicted to seeing money in my account\u201d and \u201cobsessed with bypassing shit\u201d made $2.1 million from cyberfraud by the time he was 18, according to federal prosecutors. He pleaded guilty to conspiracy to commit computer intrusion in November 2023 and in January 2024 was sentenced to 18 months in prison.<\/p>\n
- Fraudsters added payment options and used small deposits to verify access